CVE-2021-3779CWE-610

CVE-2021-3779: vulnerability in Tomita Masahiro ruby-mysql

Ruby-MySQL Gem Client File Read

Published · Updated

Follow this CVE+ Monitor ruby-mysql+ Monitor ruby-mysql

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.
Affected products
Tomita Masahiro · ruby-mysql